Identity of the company

Meteora Thrones – Travel Center
ADDRESS: 32 Trikalon Str. – Riga Feraiou Square, Meteora – Kalabaka, 42200
TEL: +30 24320 78455
FAX: +30 24320 78457
EMAIL: info@meteoratour.com

Scope of this Privacy Policy

The Privacy Policy of Meteora Thrones – Travel Center (referred to in this document as “we”, “our” or “us”) applies to the personal data that Meteora Thrones – Travel Center collects and processes, and protects the privacy of your personal information.
Meteora Thrones – Travel Center needs to collect, use and disclose personal information in order to perform our business functions and activities, including making and managing travel bookings on behalf of our customers. Meteora Thrones – Travel Center is firmly committed to protecting the privacy and confidentiality of personal information and to maintaining various physical, electronic and procedural safeguards to protect personal information in our care.
Meteora Thrones – Travel Center always informs its customers in a clear manner for which purpose the personal data are collected. This Privacy Policy is a transparent summary that explains how we use, collect, manage, process and share the personal data of the customers.

Legal framework

This Privacy Policy is subject to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Personal data security

Personal information has the meaning given under your local data protection law, and, where the GDPR applies, the meaning of personal data given under the GDPR. Personal information generally means information which relates to a living individual who can be identified from that information, or from that information and other information in a person’s possession, including any expression of opinion, whether true or not, and whether recorded in material form or not, about an identified or reasonably identifiable individual, and any indication of intention in respect of an individual.
Generally, the type of personal information Meteora Thrones – Travel Center collects about you is the information that is needed to facilitate your travel arrangements and bookings and to arrange travel related services and/or products on your behalf.
Meteora Thrones – Travel Center collects your personal data only for explicit and legitimate purposes, when you book a tour with us or when use our services. We keep certain personal data, in particular the information with which we can identify you.
We commit ourselves to take all reasonable measures to safely collect, process, store and share your data. We also ensure that the companies we work with will handle your personal data with the same carefulness as we do. Meteora Thrones – Travel Center always communicates how your personal data will be used.

Overview of the stored data

>Meteora Thrones – Travel Center commits itself to request only the personal data that are necessary to achieve its purpose.
As a result, we may collect and process the following information about you:

• name, first name, email, telephone
• information regarding your tour(s) and information about our services
• your communication with us (for example your emails, letters, calls)
• your messages on social media directed at Meteora Thrones – Travel Center
• your feedback
• your preferred departure locations
• if you need special help

In some circumstances, we may collect personal information from you which may be regarded as sensitive information under your local data protection laws. Sensitive information may include (without limitation) your racial or ethnic origin, philosophical or religious beliefs or affiliations, sexual preferences or practices, criminal record and the alleged commission of an offence, membership of political, professional or trade associations, biometric and genetic information, passwords and financial information and health information, and (in the USA) any personal information relating to a child under the age of 13. We will only collect sensitive information in compliance with your local data protection laws, with your explicit consent and where it is reasonably necessary for, or directly related to, one or more of our functions or activities (e.g. to make travel arrangements), unless we are otherwise required or authorised to do so by law. To the extent permitted or required under your local data protection laws, you consent to us using and disclosing your sensitive information for the purpose for which it was collected, unless we subsequently receive your consent to use it for another purpose. For example, if you disclose your religious beliefs to us because you are interested in, for example, certain holiday packages, in which case you consent to us using and disclosing that information in connection with facilitating your request. We will not use sensitive information for purposes other than those for which it was collected, unless we subsequently receive your consent to use it for another purpose.

Processing purposes

Meteora Thrones – Travel Center uses your personal data for the following purposes:

• to manage your travel bookings and to deliver our services to you
• to communicate with you
• to issue your train tickets and to complete your reservations. We also use your personal information to change your bookings when you request for such changes
• to let you know if there are any changes to your booking or if there are other circumstances that may affect your travel plans, such as maintainance works at a train station
• to contact you by email and/or SMS for administrative or operational reasons, for example to send you a confirmation of your bookings and payments, to inform you about your travel schedule or to advise you about possible delays and changes
• to request for your feedback by email and/or SMS, since your opinion is of great importance to us
• the business purposes for which we will use your information include accounting, invoicing and audit, credit card or other payment card verification, fraud screening, security, legal purposes, statistical and marketing analysis, system testing, maintenance and development

Secure processing

We commit ourselves to take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against unintentional loss, destruction or damage. When you provide your personal information on our website, this information will be transmitted securely over the internet by the use of high-quality encryption.
For the processing of information of the travelers and the customers, Meteora Thrones – Travel Center uses software which is PCI DSS compliant. This means that we meet the high security standards to protect your payment card data when you provide us with this information.
As described in this Privacy Policy, we may share your personal data with third parties in the cases where it is necessary for the provision of our services. When Meteora Thrones – Travel Center shares your personal data with third parties, we require these third parties to take the appropriate technical and organisational measures to protect your personal data.
If your personal data are transferred outside the EEA (the European Economic Area includes the European Union, Iceland, Liechtenstein and Norway, also known as the “EEA”), we require that appropriate precautionary measures have been taken.

Right to object to processing

You have the right to object to the processing of your personal data due to your specific situation, at any time. Meteora Thrones – Travel Center ceases to process the personal data unless we point out overriding legitimate reasons for the processing that outweigh your interests, rights and freedoms.

Obligation to report in case of data leaks

In case of a data breach where there is a risk for the violation of the rights and freedoms of the individuals, Meteora Thrones – Travel Center promises to report as soon as possible to the supervisory authority and this no later than 72 hours after the first discovery of the data leak.
If the data breach is likely to pose a high risk to your rights and freedoms, Meteora Thrones – Travel Center will immediately report the data breach to the customer whose personal data is leaked.

Right to request access to your own personal data, right of rectification and the right to be forgotten

You have the right to request access to your own personal data. You also have the right to consult the booking information regarding the flights you have taken with us.
At the request of the customer, personal data can be rectified. If the information we have about you is not correct, please have it amended as soon as possible. This can be done by contacting Meteora Thrones – Travel Center and we will update the data as soon as possible. The contact details of Meteora Thrones – Travel Center can be found on our website:
https://meteora.com/contact-us/
At the request of the customer, certain data can be deleted, but always taking into account the storage period and the necessity of the data for the execution of the contract. As a result, the personal data will be deleted as soon as possible on condition that there are no justified reasons to keep them up-to-date.
The starting point is that only data provided by the customer or data provided in his order can be corrected or deleted.
If you have questions concerning your personal data, please contact Meteora Thrones – Travel Center.

Retention period of personal data

Meteora Thrones – Travel Center stores your personal data for a period of three years from the invoice date.
At the end of the retention period or on a valid request of the data subject, the personal data will be deleted, unless there are reasons of public interest to keep the personal data for a longer period.

Marketing communication

You can choose whether or not you want to receive marketing communication. We will only send marketing communication to the customers who have given a voluntary and explicit permission to receive our newsletters. The newsletters contain information about special offers and relevant material. Please note that we do not share your contact information and personal information with other companies for marketing purposes, unless we have obtained explicitly your consent to do so.
You can ask at any time to end marketing communication by sending an email to info@meteoratour.com with the title ‘GDPR: end marketing communication’.
You can also contact Meteora Thrones – Travel Center to express your preference not to receive marketing communication.

Right to data portability

You have the right to request for your personal data with the aim to switch to another service provider. Meteora Thrones – Travel Center promises to provide the personal data in a structured and readable form.
When the client exercises the right of data portability, he has the right to ask that the personal data, if technically possible, are directly transported from Meteora Thrones – Travel Center to the other service provider.

Cookies or other tracking technologies

In order to improve our services, to offer you relevant information and to analyse how you use our website, we can use technologies such as tracking software, pixels and cookies. Keep in mind that in most cases we cannot identify you on the basis of the information we collect through these technologies.
We use software to monitor how the website is used in order to improve the experience of the customer. This software does not allow us to collect personal data.
In order to understand how our customers deal with the emails we send them, we use pixels, so that we can see whether the emails we send are opened or not.
We also use cookies on our website or in our emails. Cookies are small pieces of information that your browser stores on the hard drive of your computer.
You can delete cookies if you wish. All functions are still accessible without cookies.

Linked Sites

Our websites may contain links to third party websites over which we have no control. We are not responsible for the privacy practices or the content of such websites. We encourage you to read the privacy policies of any linked third party websites you visit as their privacy policy and practices may differ from ours.

IP addresses

When you access our website, use any of our mobile applications or open electronic correspondence or communications from us, our servers may record data regarding your device and the network you are using to connect with us, including your IP address. An IP address is a series of numbers which identify your computer, and which are generally assigned when you access the internet.
We may use IP addresses for system administration, investigation of security issues and compiling anonymised data regarding usage of our website and/or mobile applications. We may also link IP addresses to other personal information we hold about you and use it for the purposes described above (e.g. to better tailor our marketing and advertising materials, provided you have opted in to receive electronic marketing).

Questions

Questions, comments and requests regarding this Privacy Policy are welcome and can be addressed to info@meteoratour.com
If you have a complaint related to the exercise of your rights, you can contact us. The contact details can be found on our website:
https://meteora.com/contact-us/